Security Alerts and Updates

Latest Security Updates for Apple Software
Latest Security Tests from AV-Comparatives

May 2025 (Click listings for more information).
31. Ubuntu’s apport affected by core dump vulnerability; here’s how to patch.
31. WhatsApp will stop working on these Android phones and iPhones from June 1.
31. Microsoft enforcing USB-C/USB4/USB 3.0 requirements to improve Windows 11 support.
30. Edge 137 is out, removes a lot of features, & adds picture-in-picture improvements.
30. You can now format text in Windows 11’s Notepad.
30. Office gets the current release – by Susan Bradley.
29. Mozilla releases Firefox 139.0.1 update to fix artifacts on Nvidia GPUs.
29. Microsoft Authenticator now warns to export passwords before July cutoff.
29. Threat actors abuse Google Apps Script in evasive phishing attacks.
29. Apple Safari exposes users to full-screen browser-in-the-middle attacks.
29. Cybercriminals exploit AI hype to spread ransomware & malware.
29. Victoria’s Secret takes down website after security incident.
29. Windows 11 might fail to start after installing KB5058405.
29. Data broker LexisNexis discloses data breach affecting 364,000 people.
29. Windows 11 KB5058405 fails to install with 0xc0000098 as it breaks the system’s CPU power driver.
28. Windows 10 KB5058481 update brings seconds back to calendar flyout.
28. Windows 11 KB5058499 update rolls out new Share & Click to Do features.
28. Botnet hacks 9,000+ ASUS routers to add persistent SSH backdoor.
28. Microsoft wants Windows to update all software on your PC.
28. May preview updates – by Susan Bradley.
27. Microsoft releases KB5061977 Windows 11 24H2, Server 2025 emergency out of band updates.
27. KB5058502 brings new features for Windows 11 Settings, Taskbar pins, Copilot, & Widgets.
27. Firefox 139 is available with custom wallpapers, link previews, & more.
27. Adidas warns of data breach after customer service provider hack.
27. MS-DEFCON 4: As good as it gets – by Susan Bradley.
26. Linux 6.15 is now available; last week, improvements were made to HP ZBooks & Bcachefs.
25. This Week in Security – May 25 – by Zack Whittaker.
25. Mozilla shares details on newly released Firefox address bar & search improvements.
25. Microsoft reveals how a Windows 11 clean install can boost your PC performance.
24. Bumblebee malware distributed via Zenmap, WinMRT SEO poisoning.
24. Microsoft Edge gets more Copilot on the new tab page & several fixes.
24. Nvidia confirms RTX 5060 black screens & compatibility issues with certain motherboards.
23. Valve releases SteamOS 3.7.8 with new Steam Deck & Lenovo Legion Go S support features.
23. TikTok videos push infostealer malware in ClickFix attacks.
23. AI is coming to everything – by Susan Bradley.
22. Mozilla kills Pocket & Fakespot to focus more on Firefox.
22. Microsoft rolls out big updates for Paint, Notepad, & Snipping Tool.
22. Signal now blocks Microsoft Recall screenshots on Windows 11.
21. Over 394,000 Windows PCs infected by Lumma malware, which affects Chrome, Edge, & Firefox.
21. Data-stealing Chrome extensions impersonate Fortinet, YouTube, & VPNs.
21. Coinbase says recent data breach impacts 69,461 customers.
20. Have I Been Pwned gets major refresh with celebratory confetti, unified dashboard, & more.
20. RVTools hit in supply chain attack to deliver Bumblebee malware.
20. Microsoft’s official support proves useless as Windows 11 KB5058411 installs fail.
20. Out of band for Windows 10 – by Susan Bradley.
19. Fake KeePass password manager leads to ESXi ransomware attack.
19. PowerToys v0.91.1 brings fixes for Command Palette, Workspaces, & Quick Accent.
19. Windows 10 emergency updates fix BitLocker recovery issues.
19. Microsoft: Windows 11 Administrator protection gets even better.
19. Mozilla fixes Firefox zero-days exploited at hacking contest.
18. This Week in Security – May 18 – by Zack Whittaker.
17. KB5059607, KB5059806, KB5059442: Microsoft fixed Windows 11 24H2 VBS upgrade bug.
17. Microsoft shares official guide for fixing every Windows 11/10 update download/install error.
17. Tails Linux introduces reforms in security audit postmortem to make you safer.
16. PowerPoint users on Mac can now generate captions using speech recognition.
16. KB5061258 (Build 26100.3983) Windows 11 LTSC 2024 Out-of-band hotpatch update released.
16. Microsoft shares fix for Windows 10 KB5058379 BitLocker issue on Dell, Lenovo, HP Intel PCs.
16. Printer maker Procolored offered malware-laced drivers for months.
16. Edge gets security patches for vulnerabilities exploited in the wild.
16. CISA tags recently patched Chrome bug as actively exploited.
16. Kevin Beaumont on Microsoft Recall – by Susan Bradley.
16. Scammers now using AI voices to impersonate government officials.
15. Windows 10 KB5058379 update triggers BitLocker recovery on some devices.
15. Google updates Android & Chrome with new AI & accessibility features.
15. New Tor Oniux tool anonymizes any Linux app’s network traffic.
15. Google fixes high-severity Chrome flaw with public exploit.
15. PowerToys 0.91 is out with improved Command Palette launcher & more.
14. Google Chrome to block admin-level browser launches for better security.
14. Microsoft fixes Linux boot issues on dual-boot Windows systems.
14. Classic Outlook hit with more bugs. Microsoft confirms CAA2000B, 4usqa, 49dvs sign-in issues.
13. Microsoft May Patch Tuesday fixes 5 exploited zero-days, 72 flaws.
13. Windows 11 KB5058411 & KB5058405 cumulative updates released.
13. Android 16 expands ‘Advanced Protection’ with device-level security.
13. Windows 10 KB5058379 update fixes SgrmBroker errors in Event Viewer.
13. New Intel CPU flaws leak sensitive data from privileged memory.
13. Mozilla releases Firefox 138.0.3 to fix crashes, HDR issues, & more.
13. Microsoft will update Office apps on Windows 10 until 2028.
12. OpenAI rolls out OneDrive and SharePoint connector for ChatGPT.
12. ASUS DriverHub flaw lets malicious sites run commands with admin rights.
12. Copilot Vision can now show you how to do stuff in Windows 11.
12. Windows 11 upgrade block lifted after Safe Exam Browser fix.
12. Hackers are now testing ClickFix attacks against Linux targets.
12. iOS 18.5 is out with a new wallpaper, Screen Time improvements, & more.
11. This Week in Security – May 11 – by Zack Whittaker.
11. Microsoft shares detailed guide to fix Windows 11/10 blue screen (BSOD).
11. Microsoft shares update on “major change” about Windows New Outlook enable/disable option.
11. Bluetooth 6.1 enhances privacy with randomized RPA timing.
11. ChatGPT is finally adding Download as PDF for Deep Research.
11. iClicker site hack targeted students with malware via a fake CAPTCHA.
10. Microsoft updates Windows 11 context menus, but you will probably not like it.
10. Microsoft extends Windows 10 support for M365 apps like Teams, Outlook & OneDrive.
10. Fake AI video generators drop new Noodlophile infostealer malware.
10. Google starts pushing Gemini Live voice chat mode to Workspace users.
09. Microsoft fixes broken spellchecker in Edge.
08. FBI: End-of-life routers hacked for cybercrime proxy networks.
08. Google Chrome now uses Gemini Nano to fight online scams.
08. Raspberry Pi OS updated with new lock screen, better printer application, & more.
08. MS-DEFCON 2: Deferring that upgrade – by Susan Bradley.
07. Microsoft improves Windows Autopatch with hotpatch & better data sharing.
07. CoGUI phishing platform sent 580 million emails to steal credentials.
07. Medical device maker Masimo warns of cyberattack, manufacturing delays.
07. Microsoft: April updates cause Windows Server auth issues.
06. Fedora Linux is now an officially supported WSL distro.
06. New Microsoft 365 outage impacts Teams and other services.
06. Google fixes actively exploited FreeType flaw on Android.
06. Microsoft pushes fix for Windows 11 24H2 update failures.
05. Admins find Windows 11 24H2 PowerShell AppLocker/WDAC script enforcement broken for months.
05. Unofficial Signal app used by Trump officials investigates hack.
05. Darcula PhaaS steals 884,000 credit cards via phishing texts.
05. Microsoft is killing Skype today, pushing users to Teams.
04. This Week in Security – May 4 – by Zack Whittaker.
04. OpenAI document explains when to use each ChatGPT model.
04. Microsoft quietly fixed broken Windows 10 jump lists.
03. Microsoft ends Authenticator password autofill, moves users to Edge.
03. Microsoft explains why Windows 11 Copilot+ PCs are better than Windows 10.
03. Windows 11 24H2 download is now available for everyone.
02. Is it a bug, or is it expected? – by Susan Bradley.
02. Magento supply chain attack compromises hundreds of e-stores.
02. New research exposes malicious Go modules that wipe out your disk.
02. Microsoft fixes Exchange Online bug flagging Gmail emails as spam.
02. Microsoft makes all new accounts passwordless by default.
01. In response to court ruling, Spotify submits new app update to Apple App Store.
01. Google Voice gets a call interface makeover & three-way support.
01. Windows 11 users reportedly losing data due to Microsoft’s forced BitLocker encryption.
01. Tails 6.15 out now with Tor Browser 14.5.1, Linux 6.1.135, & removed drivers.
01. Firefox 138.0.1 is out with fixes for Outlook bugs & more.
01. Microsoft blocks the most popular Windows 11 bypass for internet & MSA.
01. AnduinOS 1.3 is a Linux distro that looks like Windows 11, now with GNOME 48 & HDR support.
01. Microsoft updates official lightweight Windows 11 Validation OS with DISM, WPF .NET upgrades.

April 2025 (Click listings for more information).
30. Microsoft: Windows 11 24H2 updates fail with 0x80240069 errors.
30. WhatsApp unveils ‘Private Processing’ for cloud-based AI features.
29. Apple ‘AirBorne’ flaws can lead to zero-click AirPlay RCE attacks.
29. Microsoft fixes Outlook paste, blank calendar rendering issues.
29. Firefox is updated with profiles & better looks on Windows 11.
29. The local account tax – by Susan Bradley.
28. Nvidia releases a big hotfix driver to address issues plaguing its newest GPUs.
28. VeriSource now says February data breach impacts 4 million people.
28. Kali Linux warns of update failures after losing repo signing key.
28. Microsoft fixes Outlook on the web search issues & failures.
27. This Week in Security – April 27 – by Zack Whittaker.
27. Brave’s Cookiecrumbler tool taps community to help block cookie notices.
26. Microsoft releases Windows 11 KB5055643, KB5057781, KB5059281 setup & recovery updates.
26. Microsoft releases KB5059093 OOBE (initial setup) update for Windows 11 24H2, Server 2025.
25. Windows 11 KB5055627 is a massive update with a lot of new features.
25. Windows “inetpub” security fix can be abused to block future updates.
25. Microsoft announces a fix for CPU spikes when typing in Outlook.
24. Microsoft fixes bug causing incorrect 0x80070643 WinRE errors.
24. Microsoft’s official ‘inetpub’ folder lets hackers permanently block Windows updates on PCs.
23. WhatsApp’s new Advanced Chat Privacy protects sensitive messages.
23. Microsoft fixes Remote Desktop freezes caused by Windows updates.
23. Windows 10 finally gets a fix – by Susan Bradley.
22. AMD releases new Windows 11/10 chipset driver for Ryzen 9000, 8000, 7000, 5000, 3000, more.
22. Windows 10 KB5055612 preview update fixes a GPU bug in WSL2.
22. Windows 11 23H2 gets Phone Link Start menu integration & more in KB5055629.
22. Microsoft fixes that Windows Update error it told you to ignore.
22. Cookie-Bite attack PoC uses Chrome extension to steal session tokens.
22. MS-DEFCON 3: Cleanup time – by Susan Bradley.
21. Nvidia shares hotfix driver for Windows Sleep temperature bug, Modern Standby black screen.
21. Nvidia fixes Windows 11 24H2 driver issues but breaks GPU temperature reading.
20. This Week in Security – April 20 – by Zack Whittaker.
20. Phishers abuse Google OAuth to spoof Google in DKIM replay attack.
19. Microsoft explains TPM benefits & why it makes Windows 11 better than Windows 10.
19. New Android malware steals your credit cards for NFC relay attacks.
18. Speeding up Windows 11’s search – by Susan Bradley.
18. Scammers pose as FBI IC3 employees to ‘help’ recover lost funds.
18. ASUS warns of critical auth bypass flaw in routers using AiCloud.
18. Google brings ChromeOS M135 to the stable channel, with improved mouse support & more.
18. Microsoft Edge gets fixes for the setup experience & security issues.
17. Entertainment services giant Legends International discloses data breach.
17. Chrome extensions with 6 million installs have hidden tracking code.
17. Microsoft is making Windows 11 23H2, 22H2 less secure than 24H2 by killing a VBS feature.
16. Apple fixes two zero-day exploits in targeted iPhone attacks.
16. Microsoft shares detailed guidance for AI scams that are nearly impossible not to fall for.
16. Google stopped 5.1 billion rogue ads from reaching users & fired millions of bad accounts.
16. Microsoft warns of blue screen crashes caused by April updates.
16. Some devices offered Windows 11 upgrades despite Intune blocks.
15. It’s Identity Theft Day! – by Susan Bradley.
15. VirtualBox 7.1.8 is available with fixes for 100% CPU utilization & other issues.
15. Mozilla releases Firefox 137.0.2 with fixes for DRM, multiple restarts, & more.
15. Google adds Android auto-reboot to block forensic data extractions.
15. Microsoft warns of CPU spikes when typing in classic Outlook.
15. Microsoft confirms Windows Hello issues in latest Windows 11 updates.
15. Microsoft makes it harder to enable ActiveX in Office apps to improve security.
14. Hertz confirms customer info & driver’s licenses stolen in data breach.
14. Microsoft updates several Surface devices with stability, security, & more.
14. New Windows updates fix Active Directory policy issues.
14. Windows 10 Update error 0x80070643? Pretend it is not there, says Microsoft.
14. Windows 10 KB5057589, KB5055674, KB5056474, KB5055769, KB5055768, KB5055770 updates released.
13. This Week in Security – April 13 – by Zack Whittaker.
13. Chrome 136 fixes 20-year browser history privacy risk.
13. Microsoft released KB5055671 / KB5056789 Windows 11 recovery updates for all versions.
12. Tycoon2FA phishing kit targets Microsoft 365 with new tricks.
12. Microsoft releases KB5058919/KB5058922/KB5058921 Windows 11 & 10 out-of-band updates.
11. Apple Maps on the web leaves beta & launches with support for mobile devices.
11. WinRE KB5057589 fake out – by Susan Bradley.
11. Microsoft: Windows ‘inetpub’ folder created by security fix, don’t delete.
11. US lab testing provider exposed health data of 1.6 million people.
11. KB5002623: Microsoft fixes Office, Outlook, Word, Excel KB5002700 hangs & freezes.
11. Microsoft broke Classic Outlook download as it pushes New Outlook for Windows.
10. Microsoft releases emergency update to fix Office 2016 crashes.
10. Microsoft PowerToys 0.90.1 fixes inability to install from WinGet & more.
10. A licensing issue blocks Microsoft 365 Family for some users.
09. Oracle says “obsolete servers” hacked, denies cloud breach.
09. Windows 11 April update unexpectedly creates a new ‘inetpub’ folder.
09. Windows 11’s BYPASSNRO is still part of Rufus as it receives its latest update [Update].
09. April 2025 updates break Windows Hello on some PCs.
09. Phishing kits now vet victims in real-time before stealing credentials.
08. Microsoft April 2025 Patch Tuesday fixes exploited zero-day, 134 flaws.
08. Windows 10 KB5055518 update fixes random text when printing.
08. Windows 11 KB5055523 & KB5055528 cumulative updates released.
08. WhatsApp flaw can let attackers run malicious code on Windows PCs.
08. New Mirai botnet behind surge in TVT DVR exploitation.
08. Firefox 137.0.1 is out with fixes for crashes on startup, downloads, & more.
07. Microsoft delays WSUS driver sync deprecation indefinitely.
07. Google fixes Android zero-days exploited in attacks, 60 other flaws.
06. This Week in Security – April 6 – by Zack Whittaker.
06. E-ZPass toll payment texts return in massive phishing wave.
05. WinRAR flaw bypasses Windows Mark of the Web security alerts.
05. Microsoft blocks Windows 11 24H2 update on some new PCs.
04. Nvidia just fixed an AMD Linux bug while it struggles with Windows driver issues.
04. Apple updates Apple Music for Windows with Dolby Atmos support.
04. Tails users can now save files in the Tor Browser anywhere.
04. Mozilla improves the way Firefox add-ons & extensions collect your data.
04. Microsoft is killing something inside Edge to improve user data privacy.
04. Microsoft confirms Outlook shows blank calendars, meeting is a bit broken too.
04. Microsoft shares detailed fix for a six-month old Outlook, Word DLL bug.
03. MS-DEFCON 2: Seven months and counting – by Susan Bradley.
02. Genetic data site openSNP to close & delete data over privacy concerns.
02. Verizon Call Filter API flaw exposed customers’ incoming call history.
02. Windows 11’s BYPASSNRO is still part of Rufus as it receives its latest update.
02. Counterfeit Android devices found preloaded with Triada malware.
02. Proton Drive is now available natively on Windows on ARM.
01. New Windows 11 trick lets you bypass Microsoft Account requirement.
01. Apple backports zero-day patches to older iPhones & Macs.
01. Firefox gets big update with tab groups, improved address bar, HEVC for Linux, & more.
01. Critical auth bypass bug in CrushFTP now exploited in attacks.
01. Microsoft shared Windows 11 KB5054981/ KB5054686/ KB5056378/ KB5054059 setup, recovery updates.
01. Wintoys update lets you set classic File Explorer, uninstall Edge, & more in Windows 11.
01. PowerToys 0.90 is out with a new launcher, improved Color Picker, & more.

4/A6Y2BsbQZhmz6XbH9WrwaHSTJdwvtAOdTOWqvlTSM1o.wplhENXo_gYVoiIBeO6P2m_yozPFlgI